Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer
File: w9zZWnJK1uO5h0xuTWs5684ULNQ.cer (raw, json)
Hash identifier: ICjD3kNvQdVKEppRG8Wv2GtnRjI0Ms3d/93GRCngaac=
Subject key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Certificate issuer: /CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Certificate serial: 028A2A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Fri 30 Jan 2026 14:06:27 +0000
Certificate not after: Wed 31 Mar 2027 00:00:00 +0000
Subordinate resources: IP: 203.17.58.0/23
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 12:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 166442 (0x28a2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE, serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
Validity
Not Before: Jan 30 14:06:27 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b9:3c:1b:76:d7:fb:02:6e:f5:88:2d:71:5a:
7f:aa:25:fd:55:30:e4:ce:e2:44:95:33:f2:b5:1b:
34:8d:6f:fa:c9:5d:4a:65:14:cf:4a:e5:d8:dc:4c:
d4:bb:04:44:8b:6e:6b:1c:bb:82:75:05:1f:b7:09:
c4:ba:67:c3:b2:b7:d6:1d:9a:39:5d:52:70:3a:74:
68:d0:36:19:51:1e:77:c3:09:ac:1c:54:ca:b4:9b:
ab:49:21:dc:1d:51:cc:41:f6:a5:58:69:e3:5d:1e:
f0:74:b2:c7:3f:12:d5:9b:87:75:c7:12:64:5a:d4:
18:f5:25:16:14:3c:39:d4:58:66:b7:04:d9:3a:ab:
80:2c:41:41:fb:f3:6a:56:8d:3a:ef:14:7f:7d:72:
83:cd:47:e9:61:f9:b8:54:9f:ac:a4:1a:f9:75:76:
f0:bd:9e:c1:1e:a0:18:76:38:ed:72:be:68:38:03:
62:ad:c0:c0:3b:64:6a:1e:d3:09:bc:8b:15:35:a3:
70:ff:04:0c:1c:28:6b:f7:9e:91:6a:7f:69:c7:7c:
b5:7e:26:05:8f:90:64:44:81:52:f8:2b:6e:99:f2:
cc:1d:5b:4a:6c:88:9a:67:fc:09:b2:6a:28:c6:a2:
e9:e0:14:e3:59:1e:17:10:5e:ac:c9:84:f2:09:19:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4
X509v3 Authority Key Identifier:
keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.17.58.0/23
Signature Algorithm: sha256WithRSAEncryption
73:6a:ef:90:bf:3d:f4:31:88:c3:a9:22:47:74:32:1e:d2:3f:
06:51:3b:cb:61:0c:77:c8:43:de:87:af:88:c9:65:36:23:58:
db:a3:52:ae:f2:54:ce:00:4d:7d:17:a1:45:5f:a4:04:2f:5e:
97:bc:04:97:9a:fb:70:c7:f5:da:6e:a8:5d:fe:0a:1c:d3:78:
7b:d1:2b:24:c6:bb:0d:6e:ef:a6:b6:c7:46:c4:11:5b:84:04:
17:bb:ba:43:5d:42:5d:3e:3a:7d:5b:d3:4e:87:97:90:41:2c:
09:aa:72:b0:ea:5b:80:13:e7:8a:b1:f5:c2:98:7e:cd:9e:8f:
6f:22:6d:ed:ad:a3:a1:86:b7:a1:9e:6b:6e:fb:16:31:42:b4:
15:85:25:06:f2:13:12:10:1f:46:d0:6c:fa:49:44:64:a1:b0:
48:26:29:a7:1c:87:e8:7c:dc:08:ee:35:ef:06:93:01:6c:fd:
e7:ab:8e:11:e0:d8:5e:8b:24:f2:81:d2:47:51:70:1b:68:c7:
6e:28:f2:b9:af:2d:8f:65:62:e4:12:0c:bc:b4:30:4f:44:ac:
4f:68:ab:3e:aa:7e:21:ef:03:f6:02:a6:63:5a:df:47:3e:24:
75:c1:8a:cc:19:1a:c0:20:4f:0c:c9:e2:2d:a4:b6:b9:39:9c:
a1:b3:e0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:09:54 2026 by rpki-client